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IN THE CLAIMS 

1-25. (Canceled). 

26. (Currently amended) A network relaying method for a 
communication network system in which a plurality of network 
devices are coupled via a communication path, each network 
device including a network relaying device which is coupled 
via a plurality of I/O ports to a corresponding plurality of 
terminals, the method comprising the steps of: 

receiving a packet at a first I/O port from a source 
terminal coupled to the first I/O port, the packet including a 
header containing a packet transmission source address; 

determining whether a combination of the first I/O port 
and the packet transmission source address coincides with a 
combination of an I/O port and a transmission source address 
that have been registered in advance with a correspondence 
therebetween ; 

when the determining step results in a determination that 
the combination of the first I/O port and the packet 
transmission source address coincides with a combination of an 
I/O port and transmission source address that have been 
registered in advance with a correspondence therebetween, 
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transferring the packet received at the first I/O port via a 
second I/O port; 

when the determining step results in a determination that 
the combination of the first I/O port and the packet 
transmission source address do not have a coincidence with a 
combination of an I/O port and transmission source address 
that have been registered in advance with a correspondence 
therebetween : 

limiting transfer of the received packet and 
transmitting a request for user authentication of a user 
to the source terminal of said received packet ; 

receiving user authentication information sent from 
the source terminal in response to the request for user 
authentication; 

executing user authentication of the user based on 
the user authentication information thus received and 
based on the packet transmission source address; 

when the user is authenticated by the user 
authentication executed in the executing step, 
registering the first I/O port with a correspondence to 
the packet transmission source address ; and 

transferring the packet received at the first I/O 
port via the second I/O port. 
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27. (Previously presented) A network relaying method 
according to Claim 26, wherein the user authentication 
information includes a user name and a password. 

28. (Previously presented) A network relaying method 
according to Claim 26, wherein the transmission source address 
includes an IP address and a MAC address. 

29. (Previously presented) A network relaying 
apparatus , comprising : 

a plurality of I/O ports coupled to a plurality of 
terminals , respectively; 

a communication portion for transmitting and receiving 
data via the plurality of I/O ports; 

a relay portion which determines a transmitting I/O port 
of the plurality of I/O ports, from which a packet received 
via the communication portion from a receiving I/O port of the 
plurality of I/O ports is output via the communication 
portion; and which determines whether a combination of the 
receiving I/O port and a packet transmission source address 
contained in the packet coincides with a combination of an I/O 
port and a transmission source address that have been 
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registered in advance with a correspondence therebetween, 
wherein said relay portion transfers the received packet from 
the transmitting I/O port when the relay portion determines 
that the combination of the receiving I/O port and the packet 
transmission source address coincides with a combination of an 
I/O port and transmission source address that have been 
registered in advance with a correspondence therebetween, and 
wherein said relay portion requests user authentication of a 
user from a source terminal of said received packet when the 
relay portion determines that the combination of the receiving 
I/O port and the packet transmission source address do not 
have a coincidence with a combination of an I/O port and a 
transmission source address that have been registered in 
advance with a correspondence therebetween; and 

an authentication portion which registers the receiving 
I/O port with a correspondence to the packet transmission 
source address when completing user authentication based on 
user authentication information sent from the source terminal 
in response to the request for user authentication. 

30. (Previously presented) A network relaying apparatus 
according to Claim 29, wherein the user authentication 
information includes a user name and a password. 
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31. (Previously presented) A network relaying apparatus 
according to Claim 29, wherein the transmission source address 
includes an IP address and a MAC address. 
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